What factors need to be evaluated when doing a DPIA?
The data protection impact assessment (DPIA) must include the following minimum elements:
Systematic description of the planned processing operations and the purpose of the processing
Assessment of the necessity and proportionality of the processing operations
Risk assessment for the rights and freedoms of data subjects
Measures to be taken against such risks and arrangements for demonstrating compliance with data protection laws
The responsible parties may use different methods for carrying out the evaluation, however the criteria are the same.
